[CLOSED] CoinLenders

[Birdy]

Great!

[BigBitz]

New feature: Locking of withdrawal addresses!

You can now lock your account to a specific withdrawal address in Settings. I recommend doing this now - even if you don't think you will be hacked, it's better to be safe than sorry.

You can unlock the address, however it will take 14 days before you are able to withdraw to any address you like. An email alert is automatically sent when there is an unlock request.

Who pentested this site?

As a depositor and not a lender I would like to review the pentest.

[🏰 TradeFortress 🏰]

New feature: Locking of withdrawal addresses!

You can now lock your account to a specific withdrawal address in Settings. I recommend doing this now - even if you don't think you will be hacked, it's better to be safe than sorry.

You can unlock the address, however it will take 14 days before you are able to withdraw to any address you like. An email alert is automatically sent when there is an unlock request.

Who pentested this site?

As a depositor and not a lender I would like to review the pentest.

PM'd

[Equilux]

New feature: Locking of withdrawal addresses!

You can now lock your account to a specific withdrawal address in Settings. I recommend doing this now - even if you don't think you will be hacked, it's better to be safe than sorry.

You can unlock the address, however it will take 14 days before you are able to withdraw to any address you like. An email alert is automatically sent when there is an unlock request.

Very nice!

Now I actually have one last concern; you say the deposits are insured, not FDIC insured but insured by you and your (BTC) assets. Could you provided somekind of proof for that? And are there people who have some proof of who you are, have some documents of you for instance?

Not to be rude, but Hashking offered a similar personal kind of insurance, which turned out to be not very impressive.

[takagari]

Made .00037781 BTC Over night. I like it, I'll be moving more coins to you as I buy them, but yes please increase security!

[Zedeius]

When you logout there is a typo in the message. It says: You have being logged out.

should be: You have been logged out*

[jim667]

When trying to change my password, I get the "Passwords do not match or are less than 8 chars." error. I am sure that my passwords are way longer than 8 chars, and I tried a couple times to be sure they match.  TradeFortress, could you please look at it?

[001sonkit]

Reports~~~ Reports~~~ Everyone would like a report page for your site

[🏰 TradeFortress 🏰]

New feature: Locking of withdrawal addresses!

You can now lock your account to a specific withdrawal address in Settings. I recommend doing this now - even if you don't think you will be hacked, it's better to be safe than sorry.

You can unlock the address, however it will take 14 days before you are able to withdraw to any address you like. An email alert is automatically sent when there is an unlock request.

Very nice!

Now I actually have one last concern; you say the deposits are insured, not FDIC insured but insured by you and your (BTC) assets. Could you provided somekind of proof for that? And are there people who have some proof of who you are, have some documents of you for instance?

Not to be rude, but Hashking offered a similar personal kind of insurance, which turned out to be not very impressive.

Hashking had pirate exposure, I (obviously) do not . Regarding the insurance, it's through a combination of my bitcoin and fiat holdings as well as stop loss orders on gox & etc. Some people here in the community do know my name & who I am. It's also interesting how scammers like Pirate, all those deposit takers, Ian Bakewell, etc did few things and stayed within their comfort region, while I'm working on sites unrelated to coinlenders & a new non-PoW, PoS cryptocurrency Also see my response later on

When you logout there is a typo in the message. It says: You have being logged out.

should be: You have been logged out*

Fixed, thanks!

When trying to change my password, I get the "Passwords do not match or are less than 8 chars." error. I am sure that my passwords are way longer than 8 chars, and I tried a couple times to be sure they match.  TradeFortress, could you please look at it?

Fixed, caused by the client hashing update, now should be alright!

Reports~~~ Reports~~~ Everyone would like a report page for your site

You mean an automatically updating list of CoinLender's holdings? Loans are quite simple to list, and I could use exchange APIs. The question is if I'm comfortable disclosing it - I don't always make money trading for example, but it's the overall picture that counts, and I don't want to be forced to liquidate assets and positions when there's a large run.

Speaking of which, helping people with resetting passwords & etc is taking a lot of my time. Please use KeePass or another password manager!

[001sonkit]

ATC777 loan (remaining): 28.73 BTC (might go the way of Ian Bakewell)
scrybe line of credit: 35 BTC
Btcjam secured loan (remaining): 3 BTC
CoinLenders 20 BTC loan: 20 BTC

Total loans / lines of credit: 86.73 BTC

Total coins: 21.6 BTC

At least we get to know something from BTCINVEST

Keep looking forward

[shawshankinmate37927]

TradeFortress,

Something else I just thought about...

Is CoinLenders a one-man show?  Or, is there someone ready and able to fill your shoes, manage the assets/accounts, and keep things running smoothly if you were to be incapacitated due to some unfortunate event?  For example, if you had a heart attack or were involved in a car accident that required hospitalization for several days/weeks.

[stenkross]

It seems to be a rounding error in the interest payments.
If I add up all my interest payments and my deposits, it does not match my bitcoin balance.
It's only 1 satoshi off, so it's no biggie really, but it could be worth looking into.

I sent you a mail with more details.
Keep up the good work!

// Stenkross

[🏰 TradeFortress 🏰]

It seems to be a rounding error in the interest payments.
If I add up all my interest payments and my deposits, it does not match my bitcoin balance.
It's only 1 satoshi off, so it's no biggie really, but it could be worth looking into.

I sent you a mail with more details.
Keep up the good work!

// Stenkross

Hi,

Internally, CoinLenders were calculating balances and digits to 10 decimal places with the UI rounding it to 8 decimals. This behavior has being changed so now it should be consistent, even through the maximum difference previously was 1 satoshi.

Thanks!

[BigBitz]

Good Job TF.

I still did not get anything back from you re; pentest information other than the person who carried it out. Did he provide a scanning methodology etc? I want to be safe in the knowledge my coins are secure. I am willing to confirm details for the other members also as I understand not everyone is as familiar with these practices as others.

[chadqberry]

TF,
Was Coinlenders down or affected at all when Gox was down yesterday (4/21)?
I noticed my password no longer worked during that time, I even submitted a request to get it reset.  Then as soon as Gox came back up and the market settled my password now works again at coinlenders.  I know it was not my own mis-type or forgetting the password since I use lastpass and it enters the password for me.  It also was not a capcha issue since it plainly says if your password is wrong or your captcha if that's the case. 
Somehow during the gox outage, coinlenders didn't recognize my password for some reason.  Were you possibly trying to limit loss during what was expected to be a crash? 
Thanks
ChadQberry

[BigBitz]

TF,
Was Coinlenders down or affected at all when Gox was down yesterday (4/21)?
I noticed my password no longer worked during that time, I even submitted a request to get it reset.  Then as soon as Gox came back up and the market settled my password now works again at coinlenders.  I know it was not my own mis-type or forgetting the password since I use lastpass and it enters the password for me.  It also was not a capcha issue since it plainly says if your password is wrong or your captcha if that's the case. 
Somehow during the gox outage, coinlenders didn't recognize my password for some reason.  Were you possibly trying to limit loss during what was expected to be a crash? 
Thanks
ChadQberry

I deposited yesterday and didn't notice it down when MtGox was down. I guess this might just be coincidence though, right?

On another note... CL Don't seem to be involved into fiat much as they state on their website they are not into currency risks so I don't think the availability of MtGox is overly important for their model.

[takagari]

I'll be honest I'll invest more every month,. I like seeing my investment climb even if it's a little bit.

If you ever hire for support etc. I'd love a chance to help out I'm a military member on Parental leave in Canada, So plenty of time off and collecting a pay check

[🏰 TradeFortress 🏰]

TF,
Was Coinlenders down or affected at all when Gox was down yesterday (4/21)?
I noticed my password no longer worked during that time, I even submitted a request to get it reset.  Then as soon as Gox came back up and the market settled my password now works again at coinlenders.  I know it was not my own mis-type or forgetting the password since I use lastpass and it enters the password for me.  It also was not a capcha issue since it plainly says if your password is wrong or your captcha if that's the case. 
Somehow during the gox outage, coinlenders didn't recognize my password for some reason.  Were you possibly trying to limit loss during what was expected to be a crash? 
Thanks
ChadQberry

We're not connected to gox, may be a cache issue regarding the client sided hashing - emailed.

I'll be honest I'll invest more every month,. I like seeing my investment climb even if it's a little bit.

If you ever hire for support etc. I'd love a chance to help out I'm a military member on Parental leave in Canada, So plenty of time off and collecting a pay check

Sorry but it's tricky if people other than my IP & login could view account information, change passwords, etc. 

[takagari]

Oh hah. Sorry. Obviously. I'd probably need to be blood related. If you ever need help elsewhere keep me in mind. I'd never expect password or account direct info.

[🏰 TradeFortress 🏰]

If you were having problems verifying your account, send me a PM!